{"id":254029,"date":"2021-05-27T00:06:27","date_gmt":"2021-05-26T22:06:27","guid":{"rendered":"https:\/\/www.borncity.com\/blog\/?p=254029"},"modified":"2022-04-03T06:41:06","modified_gmt":"2022-04-03T04:41:06","slug":"google-chrome-91-0-4472-77-mit-sicherheitsfixes","status":"publish","type":"post","link":"https:\/\/borncity.com\/blog\/2021\/05\/27\/google-chrome-91-0-4472-77-mit-sicherheitsfixes\/","title":{"rendered":"Google Chrome 91.0.4472.77 mit Sicherheitsfixes"},"content":{"rendered":"<p><img decoding=\"async\" style=\"float: left; margin: 0px 10px 0px 0px; display: inline;\" src=\"https:\/\/borncity.com\/blog\/wp-content\/uploads\/2015\/01\/Chrome.jpg\" \/>[<a href=\"https:\/\/borncity.com\/win\/2021\/05\/27\/google-chrome-91-0-4472-77-mit-sicherheitsfixes\/\" target=\"_blank\" rel=\"noopener\">English<\/a>]Google hat zum 25. Mai 2021 den Google Chrome 91.0.4472.77 freigegeben. Es ist ein Sicherheitsupdate, welches gleich 32 Schwachstellen in \u00e4lteren Browserversionen beseitigt.<\/p>\n<p><!--more--><\/p>\n<p>Im Google-Blog gibt es <a href=\"https:\/\/chromereleases.googleblog.com\/2021\/05\/stable-channel-update-for-desktop_25.html\" target=\"_blank\" rel=\"noopener\">diesen Beitrag<\/a> mit einer Liste der im Chrome 91.0.4472.77 f\u00fcr den Desktop geschlossenen Schwachstellen. Hier einige hervorgehobene Schwachstellen, die beseitigt wurden.<\/p>\n<ul>\n<li>[$20000][1208721] High CVE-2021-30521: Heap buffer overflow in Autofill. Reported by ZhanJia Song on 2021-05-13<\/li>\n<li>[$7500][1176218] High CVE-2021-30522: Use after free in WebAudio. Reported by Piotr Bania of Cisco Talos on 2021-02-09<\/li>\n<li>[$7500][1187797] High CVE-2021-30523: Use after free in WebRTC. Reported by Tolyan Korniltsev on 2021-03-13<\/li>\n<li>[$TBD][1197146] High CVE-2021-30524: Use after free in TabStrip. Reported by David Erceg on 2021-04-08<\/li>\n<li>[$TBD][1197888] High CVE-2021-30525: Use after free in TabGroups. Reported by David Erceg on 2021-04-11<\/li>\n<li>[$TBD][1198717] High CVE-2021-30526: Out of bounds write in TabStrip. Reported by David Erceg on 2021-04-13<\/li>\n<li>[$TBD][1199198] High CVE-2021-30527: Use after free in WebUI. Reported by David Erceg on 2021-04-15<\/li>\n<li>[$NA][1206329] High CVE-2021-30528: Use after free in WebAuthentication. Reported by Man Yue Mo of GitHub Security Lab on 2021-05-06<\/li>\n<li>[$7500][1195278] Medium CVE-2021-30529: Use after free in Bookmarks. Reported by koocola (@alo_cook) and Nan Wang (@eternalsakura13) of 360 Alpha Lab on 2021-04-02<\/li>\n<li>[$7500][1201033] Medium CVE-2021-30530: Out of bounds memory access in WebAudio. Reported by kkwon on 2021-04-21<\/li>\n<li>[$5000][1115628] Medium CVE-2021-30531: Insufficient policy enforcement in Content Security Policy. Reported by Philip Papurt on 2020-08-12<\/li>\n<li>[$5000][1117687] Medium CVE-2021-30532: Insufficient policy enforcement in Content Security Policy. Reported by Philip Papurt on 2020-08-18<\/li>\n<li>[$5000][1145553] Medium CVE-2021-30533: Insufficient policy enforcement in PopupBlocker. Reported by Eliya Stein on 2020-11-04<\/li>\n<li>[$3000][1151507] Medium CVE-2021-30534: Insufficient policy enforcement in iFrameSandbox. Reported by Alesandro Ortiz on 2020-11-20<\/li>\n<li>[$1000][1194899] Medium CVE-2021-30535: Double free in ICU. Reported by nocma, leogan, cheneyxu of WeChat Open Platform Security Team on 2021-04-01<\/li>\n<li>[$500][1145024] Medium CVE-2021-21212: Insufficient data validation in networking. Reported by Hugo Hue and Sze Yiu Chau of the Chinese University of Hong Kong on 2020-11-03<\/li>\n<li>[$15000][1194358] Low CVE-2021-30536: Out of bounds read in V8. Reported by Chris Salls (@salls) on 2021-03-31<\/li>\n<li>[$3000][830101] Low CVE-2021-30537: Insufficient policy enforcement in cookies. Reported by Jun Kokatsu (@shhnjk) on 2018-04-06<\/li>\n<li>[$3000][1115045] Low CVE-2021-30538: Insufficient policy enforcement in content security policy. Reported by Tianze Ding (@D1iv3) of Tencent Security Xuanwu Lab on 2020-08-11<\/li>\n<li>[$1000][971231] Low CVE-2021-30539: Insufficient policy enforcement in content security policy. Reported by unnamed researcher\u00a0 on 2019-06-05<\/li>\n<li>[$500][1184147] Low CVE-2021-30540: Incorrect security UI in payments. Reported by @retsew0x01 on 2021-03-03<\/li>\n<\/ul>\n<p>Einige Schwachstellen sind mit der Einstufung High versehen. Weitere Probleme wurden intern durch Audits und Fuzzing aufgesp\u00fcrt und behoben. Einen \u00dcberblick \u00fcber die Features <a href=\"https:\/\/web.archive.org\/web\/20220328125303\/https:\/\/chromestatus.com\/features\/schedule\" target=\"_blank\" rel=\"noopener\">findet sich hier<\/a>. Die Chrome-Version f\u00fcr Windows, Mac und Linux wird in den n\u00e4chsten Tagen \u00fcber die automatische Update-Funktion auf die Systeme ausgerollt. Sie k\u00f6nnen diese Build aber auch <a href=\"https:\/\/www.google.com\/intl\/de_de\/chrome\/\" target=\"_blank\" rel=\"noopener\">hier herunterladen<\/a>. (<a href=\"https:\/\/www.deskmodder.de\/blog\/2021\/05\/26\/google-chrome-91-91-0-4472-77-behebt-32-sicherheitsluecken\/\" target=\"_blank\" rel=\"noopener\">via<\/a>)<\/p>\n<p><strong>Erg\u00e4nzung:<\/strong> In einem <a href=\"https:\/\/blog.chromium.org\/2021\/05\/chrome-is-faster-in-m91.html\" target=\"_blank\" rel=\"noopener\">Blog-Beitrag<\/a> geben die Entwickler an, dass der neue Chrome 91 um 23% schneller als die Vorg\u00e4nger sei.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>[English]Google hat zum 25. Mai 2021 den Google Chrome 91.0.4472.77 freigegeben. Es ist ein Sicherheitsupdate, welches gleich 32 Schwachstellen in \u00e4lteren Browserversionen beseitigt.<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1356,426,185],"tags":[406,4328,4315],"class_list":["post-254029","post","type-post","status-publish","format-standard","hentry","category-google-chrome-internet","category-sicherheit","category-update","tag-chrome","tag-sicherheit","tag-update"],"_links":{"self":[{"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/posts\/254029","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/comments?post=254029"}],"version-history":[{"count":0,"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/posts\/254029\/revisions"}],"wp:attachment":[{"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/media?parent=254029"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/categories?post=254029"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/tags?post=254029"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}